Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 12:55:17 UTC
Home > List all groups > List all tools > List all groups using tool JHUHUGIT
 Tool: JHUHUGIT
Names
JHUHUGIT
Seduploader
JKEYSKW
Sednit
Downrage
GAMEFISH
carberplike
SofacyCarberp
Carberp
Trojan.Sofacy
Category Malware
Type Reconnaissance, Banking trojan, Backdoor, Info stealer, Dropper, Downloader
Description
(ESET) We define Seduploader as a two-binary component, comprising a dropper and
the payload usually contained in this dropper. While those two have sometimes been
used independently of each other, they usually are deployed together and remain the
most-used first-stage malware of the Sednit group since the beginning of 2015. The
payload component of Seduploader has been compiled for Windows and OS X, but our
analysisis based solely on the Windows version. Nevertheless, the OS X version is very
similar, and has been described by BAE Systems in June 2015.
Information https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=07298c2b-b4cd-4c87-ba6b-dce8e942e1da
Page 1 of 2

MITRE ATT&CK Malpedia
AlienVault OTX Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool JHUHUGIT
Changed Name Country Observed
APT groups
 Sofacy, APT 28, Fancy Bear, Sednit 2004-Apr 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=07298c2b-b4cd-4c87-ba6b-dce8e942e1da
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=07298c2b-b4cd-4c87-ba6b-dce8e942e1da
Page 2 of 2